2015 Pwnie Award Winners

Best Client-Side Bug

Will it BLEND? (CVE-2015-0093, CVE-2015-3052)

Best Privilege Escalation Bug

UEFI SMM Privilege Escalation

Best Server-Side Bug

SAP LZC LZH Compression Multiple Vulnerabilities (CVE-2015-2278, CVE-2015-2282)

Best Song

“Clean Slate”

Epic 0wnage

Hacking Team

Lamest Vendor Response

“A Peek Under The Blue Coat”

Lifetime Achievement Award

Halvar Flake

Most Epic Fail

Oh, Please… Man!

Most Innovative Research

Imperfect Forward Secrecy: How Diffie-Hellman Fails in Practice

Most Over-Hyped Bug

Shellshock (CVE-2014-6271)